Docker Compose now supports provider services to connect to external systems. No wrappers needed.   #announcement   #containers

An in-depth threat modeling exercise involving Cedar, Rego, and OpenFGA policy languages.   #explain

A look at how authorization works in Kubernetes.   #explain   #kubernetes

This article mainly aims to introduce the usage and post exploitation of various certificates and authentication technologies in Kubernetes.   #attack   #iam   #kubernetes

This post explores the setup and configuration of Cilium and Tetragon in Azure Kubernetes Service and integrating & monitoring with Microsoft Sentinel.   #azure   #kubernetes   #monitor

This is a sample solution that demonstrates how to use AWS IAM Identity Center with Neptune to visualize and map relationships between identities and resources.

Make AWS IAM policies smaller by adding wildcards to actions.

PoC shadow SaaS and insecure credential detection system using a browser extension.

A painless self-hosted Git service.

Scan for secrets in dangling commits on GitHub using GH Archive data.

Deptective automatically determines the native dependencies required to run any arbitrary program or command. You can also refer to the companion blog post.

A secure, decentralized, peer-to-peer messaging app that works over Bluetooth mesh networks.

The Threat Technique Catalog for AWS describes techniques used by threat actors to take advantage of security misconfigurations or compromised credentials on the customer side ("Security in the Cloud") of the shared responsibility model.

Microsoft announced the expansion of the Zero Trust workshop to cover the additional technical pillars of Zero Trust, assisting customers on strategies that may contribute to securing their network, infrastructure, and connecting all these elements with security operations (SecOps).